svn commit: r1343880 - /httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml

[hu...@apache.org]

Author: humbedooh
Date: Tue May 29 17:53:39 2012
New Revision: 1343880

URL: http://svn.apache.org/viewvc?rev=1343880&view=rev
Log:
Adding some additional security considerations. Thanks to Daniel Shahaf for these pointers.

Modified:
    httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml

Modified: httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml?rev=1343880&r1=1343879&r2=1343880&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml (original)
+++ httpd/httpd/branches/2.4.x/docs/manual/mod/mod_log_forensic.xml Tue May 29 17:53:39 2012
@@ -93,6 +93,10 @@ version 2.1</compatibility>
     document for details on why your security could be compromised
     if the directory where logfiles are stored is writable by
     anyone other than the user that starts the server.</p>
+    <p>The log files may contain sensitive data such as the contents of 
+    <code>Authorization:</code> headers (which can contain passwords), so
+    they should not be readable by anyone except the user that starts the
+    server.</p>
 </section>
 
 <directivesynopsis>